This article is plain-language help. It is not legal advice. Ask a lawyer or accountant what you must do.

Approved contractors can note factual events about a customer they worked with. Types in the code:
– Invoice unpaid 60+ days.
– Paid 30+ days late.
– Payment reversed / charged back.
– Cancelled within 24 hours.
– No-show / no access at a booked visit.
– Cancelled after materials were ordered.

Rules built in:
– Each record must be tied to a real invoice, appointment or quote in that contractor’s account.
– A record expires after 24 months.
– Another contractor sees only a short summary, and only for a customer already in their own CRM. They never see who recorded it.
– Customers are matched by hashed email, phone and address. The raw details are not shared.
– Every view is logged. Contractors must accept the records rules first.
– A daily check suggests records from late invoices. The contractor confirms them before anything is shared.

1. In WordPress admin, open Settings → VisionScaper Records.
2. Search by a full email or a 10-digit phone number.
3. For each record, pick Disputed (hide), Active, or Removed, add a reason, and press the button.
   Disputed records are hidden until set to Active. Removed records are never shown again.

WordPress Tools → Export Personal Data includes these records for a customer’s email, under the group “Records made by contractors”.

Under Settings → Your data in the Contractor Hub (owner only):
1. Download a copy of your data: type your password and press the request button. A ZIP with CSV and JSON files is made. Large accounts build in the background and an email says when ready. The link lasts 7 days and needs the owner signed in. Passwords, secret keys and private links are left out.
2. Erase my account: type your password and the exact phrase shown. It starts a 14-day wait. A cancel link is emailed. After the wait, a daily job erases.
3. Money records are kept for the retention period, with names and details removed. The default is 7 years, a placeholder, not approved. Confirm with your accountant.
4. A customer asked to be forgotten: search for the customer, review what is erased and kept, type your password and the word shown. Their details, notes and messages are erased. Invoice totals stay. Their email and phone go on the do-not-contact list.

In the Designer, the account menu has Delete account. It removes the account and every design saved online. Designs on the device stay. Staff accounts cannot be deleted this way.

• Answer privacy requests quickly. Keep notes of what you did.
• Do the export before any erase.

• Link expired: request a new copy.
• Erase started by mistake: use the cancel link or button before the wait ends.

• Security: two-step sign-in, login history and signing out devices
• Facebook sign-in for customers
• Cron, WP-CLI, caching, SSL and REST troubleshooting (401, 403, 404)